How to Regenerate Common Agent Container Security
Keys

The keys that Sun Cluster Manager uses are stored under the /etc/opt/SUNWcacao/security directory on each node. They should be identical across all cluster
nodes.

Under normal operation, these keys can be left in their default configuration.
If you change the hostname of a cluster node, you must regenerate the common
agent container security keys. You might also need to regenerate the keys
because a possible key compromise (for example, root compromise on the machine).
To regenerate the security keys, use the following procedure.

On all cluster nodes, stop the common agent container management
daemon.

# /opt/bin/cacaoadm stop

On one node of the cluster, regenerate the
security keys.

phys-schost-1# /opt/bin/cacaoadm create-keys --force

Restart the common agent container management
daemon on the node on which you regenerated the security keys.